CVE-2026-128046

Vendor

OpenMage

Product

magento-lts

CVSS v3.1

8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-184

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 25
   CVE NVD 11h ago

   OpenMage magento-lts 20.17.0 before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an unrestricted file upload vulnerability because the…

   OpenMage magento-lts 20.17.0 before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an unrestricted file upload vulnerability because the general/file/protected_extensions blocklist omits phar, php8, and phps.…

   CVSS 8.1 CVE-2026-128046 OpenMage